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DIRECTOR OF CENTRAL INTELLIGENCE 

Security Committee SECOM-D-015 

11 January 1980 


MEMORANDUM FOR: 
FROM : 

SUBJECT: 


Chairman, Computer Security Subcommittee 

I I STATINTL 

Executive Secretary 

Proposed Briefing of Your Subcommittee 


Cecil , 

Within the CIA, an Information Task Force has been 
working for sometime to review and recommend Information 
Handling Goals. Attached is a copy of a list of such goals. 

It came to mind that you and members of your Subcommittee 
might have shared interest with this Agency Task Force, might 
have mutually reinforcing goals and may, during discussions, 
identify issues or aspects that could beneficially serve 
the common needs of the Agency and Community. 


in 

to 


If you a gree 
touch with I 
address the 


let me know about a time and I'll put you 

] Chairman, IHTF, who has agreed 

Subcommittee if you are interested. 


STATINTL 


Attachment 

Orig - Addressee w/att 
G) - SECOM Chrono w/att 
1 - SECOM Subject w/att 

SECOM/ I | f h (1/11/80) 


Approved For Release 2003/06/26 : CIA-RDP82M00591R0002001 20060-2 




^formation Handling Goals 

Approved For Rel8a6e~2O037U67Z6 rCTA-TtD^821\/ro0591R0^001 20060-2 


Resources continue to be tight while 
technological opportunity grows. Under these 
conditions wise investment can proceed only if the 
goals we are trying to achieve are understood and 
there is agreement on relative priorities. 

Presented are a set of interlocking goals for 
Information Handling. Goals are understood to be 
ideals toward which we strive. There is no 
guarantee that goals are achievable, but there is 
the sense that the future will be better if we 
work collectively toward common ends, even when 
those ends are not completely achieved. Conflicts 
between some of the goals are recognized. 


Information Handling Goals : 

V Increase the productivity and efficiency of our people and 
components; r 

2. Improve the quality of the Agency’s products; 

3. Improve the timeliness of decisions and the responsiveness of 
our products; 

; 4. Improve the security of our activities; 

5. Extend the sense of Headquarters community to all A°ency 
components in all locations! n 


Hake information handling tools a natural, well-inte«rated 
part of the office work pattern; ° 

Eliminate information handling activities of. marginal value 
vis-a-vis their cost; 

Reduce the life-cycle costs of existing and planned 
information systems; 
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9. 


Ensure, in the face of competing demands, that Information 


10. Improve the accessibility of data bases and their quality with 
regard to consistency and completeness; 

11. Shorten the coordination, approval, and release cycle of both 
intelligence and administrative actions; 

\12. Provide better control over access to classified information , 
including provision of individual accountability; 

(13;) Provide more secure- storage for sensitive material; 

14. Improve maintainability of information handling systems, both 
existing and planned. The means must be found to stabilize the 
cost of keeping production systems working effectively. 

15. Shorten information system development time. Information 's''' 1 \ 

systems must take into account a rapidly changing technology c j , ° e ^ . \ 
in meeting evolving needs. We cannot tolerate a 7-12 year ^ 

development cycle with the attendant risks of having unwanted 

or outmoded systems when they go into operation. 

16. Maintain a cadre of information handling professionals with 
the requisite skills to meet the needs over the next decade. 

Our focus must be on finding and keeping people who can reduce 
the life-cycle information systems costs through goals 14 and 


17. Establish system management standards. We must codify our 
collective experience in developing and operating systems into 
an agreed upon and enforced set of management procedures. 

This is vital to the attainment of goals 14, 15, and 16 above. 

18. Communicate most information electrically between people, 

wherever they may be. This includes Headquarters-field 
communication, sending products to consumers, etc. This goal 
is central to the achievement of several others: achieving a 
sense of community (5), integrating information tools into 
office work patterns (6), improving data base accessibility 
(10), and shortening the coordination cycle (11). 'The 
movement , paper is slow/ 

i , n ! c ^ Aftd .presents caique security risks. till, paper 
has singula^, .vittues as • medium for the reader, so electrical 
distribution lmplj.es the .availability of conveniently 
positioned ’printing and facsimile devices. 
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19. Provide a smg v universal network of user terminals. The 

inf orma Lion user should have one and only one terminal at 
his/her desk. 

20. Provide the means to capture keystrokes. Frequently, 
information is retyped, rekeyed, or "repoked 11 to make minor 
changes or to convert it to another format for distribution, 
reproduction, or filing. We must eliminate this tedious and 
error-prone activity. 

21. Achieve a consistent* and natural Agency-wide standard for 
access to information services. Access mechanisms should be 
tailored to the needs of the person, not to the peculiarities 
of the system. Consistency is needed to reduce training' time 
and achieve other information handling goals (18, 19, and 20). 

22. Store information more efficiently. Improved data base 
quality and access depend on inexpensive, fast file 
organization techniques. Both the technology and theory show 
that multiply-accessed, single-copy file storage can improve 
accuracy, consistency, and economy. 

23. Aggregate information for managers and analysts. Most 
information systems are built for specialist users, with 
products tailored to needs which are known beforehand. 

Analysts and managers often do not, or cannot predict their 
information needs. In the absence of this apriori knowledge, 
they must resort to looking at much raw data. Better means 
must be found to meet their information needs with the 
available data by processing stored data into higher-level 
forms on an ad hoc basis. 

,,, % 

2#« Provide multilevel security access to data bases. Physical 
data compartmentation should be employed only where 
sensitivity and cost warrant. Considerable technological 
progress has been made toward achieving secure access to 
multilevel security files by users cleared at different 
levels. We must accelerate this effort. Multilevel security 
capabilities are essential to achieving better access control 
for those systems that are not single-level and compartmented. 

25. Develop Cryptographic devices for user terminals and storage 
devices. The microelectronics revolution permits compact, 
inexpensive cryptographic devices that can be used not only 
for end-to-end secure electrical transmission (essential for 
goal 18), but also for additional information storage security 
(goal 13). 
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26. Develop effe' ^ive top-level coordination am ; managers of 

i^Tfiy3e§3!yic^E^200jJ8e|6^ vital 
if ve are to proceed in step on several of the goals listed 
here; establishing management standards (17), maintaining a 
professional cadre (16), providing a universal terminal net 
(19), developing a sense of community (5), and developing a 
standard, natural means for user access to information 
services (21). 

27. Develop effective top-level coordination among managers of 
componenets that use information services. Continuing 
management attention from an Agency perspective is needed to 
ferret out marginal activities (7) and to sort out priorities 
(10). Without a mechanism to make hard decisions on 
resources, we will not have the means to achieve the basic 
goals for improving performance. 

28. Establish the means to accelerate the integration of 
communications and centralized information services, 
particularly ADP services. 

Agency systems should be develo p ed with consideration for 

~~ community compatibility. As "requirements for inter-Agency 
connections arise, future ^systems should be capable of 
efficient and cost-effective interconnection. 

30. Develop overall investment and resource guidance for Agency 
. information handling. This is needed for two reasons. 

Pursuit of some of the developmental goals involves large up- 
front costs. For example, the general goal to reduce life- 
cycle system costs (8) in some cases may require volume 
equipment buys or initial investments in backbone 
communication facilities with capacities that far exceed 
initial needs. Secondly, many of the listed information 
handling goals are in^ conflict because of their resource 
implications: improving security vs; improving access to 
information reducing life-cycle system costs vs. improved 
quality and timeliness of our product. Priority attention 
must be given to resource guidance early in the planning 
period, but the means must be found to adjust it continually 
as conditions change. Resource decisions will require changes 
to action programs directed to these goals; indeed, they may 
produce major adjustments in the goals themselves. 
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